config/rbac/role.yaml (217 lines of code) (raw):
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRole
metadata:
name: manager-role
rules:
- apiGroups:
- ""
resources:
- configmaps
- pods
- serviceaccounts
- services
verbs:
- create
- delete
- get
- list
- patch
- update
- watch
- apiGroups:
- ""
resources:
- events
verbs:
- create
- patch
- apiGroups:
- ""
resources:
- namespaces
verbs:
- list
- patch
- watch
- apiGroups:
- apps
resources:
- daemonsets
- deployments
- statefulsets
verbs:
- create
- delete
- get
- list
- patch
- update
- watch
- apiGroups:
- apps
resources:
- replicasets
verbs:
- get
- list
- watch
- apiGroups:
- autoscaling
resources:
- horizontalpodautoscalers
verbs:
- create
- delete
- get
- list
- patch
- update
- watch
- apiGroups:
- cloudwatch.aws.amazon.com
resources:
- amazoncloudwatchagents
verbs:
- get
- list
- patch
- update
- watch
- apiGroups:
- cloudwatch.aws.amazon.com
resources:
- amazoncloudwatchagents/finalizers
verbs:
- get
- patch
- update
- apiGroups:
- cloudwatch.aws.amazon.com
resources:
- amazoncloudwatchagents/status
verbs:
- get
- patch
- update
- apiGroups:
- cloudwatch.aws.amazon.com
resources:
- dcgmexporters
verbs:
- get
- list
- patch
- update
- watch
- apiGroups:
- cloudwatch.aws.amazon.com
resources:
- dcgmexporters/finalizers
verbs:
- get
- patch
- update
- apiGroups:
- cloudwatch.aws.amazon.com
resources:
- dcgmexporters/status
verbs:
- get
- patch
- update
- apiGroups:
- cloudwatch.aws.amazon.com
resources:
- instrumentations
verbs:
- get
- list
- patch
- update
- watch
- apiGroups:
- cloudwatch.aws.amazon.com
resources:
- neuronmonitors
verbs:
- get
- list
- patch
- update
- watch
- apiGroups:
- cloudwatch.aws.amazon.com
resources:
- neuronmonitors/finalizers
verbs:
- get
- patch
- update
- apiGroups:
- cloudwatch.aws.amazon.com
resources:
- neuronmonitors/status
verbs:
- get
- patch
- update
- apiGroups:
- coordination.k8s.io
resources:
- leases
verbs:
- create
- get
- list
- update
- apiGroups:
- monitoring.coreos.com
resources:
- podmonitors
- servicemonitors
verbs:
- create
- delete
- get
- list
- patch
- update
- watch
- apiGroups:
- networking.k8s.io
resources:
- ingresses
verbs:
- create
- delete
- get
- list
- patch
- update
- watch
- apiGroups:
- policy
resources:
- poddisruptionbudgets
verbs:
- create
- delete
- get
- list
- patch
- update
- watch
- apiGroups:
- route.openshift.io
resources:
- routes
- routes/custom-host
verbs:
- create
- delete
- get
- list
- patch
- update
- watch